Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File:                     jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier:          1cwSDamQzhjKnuZ1xiC1m8FpucmAiOBhwzHxILUYAtc=
Subject key identifier:   33:38:61:E4:0C:66:42:80:CF:30:40:7F:FF:88:19:4E:4A:8E:75:D6
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer:       /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial:       019A50E2ECC5D08B6024028D5E231AC2D32A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number:          0C5E
Signing time:             Tue 04 Nov 2025 22:00:40 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:40 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:40 +0000
Files and hashes:         1: B_tPzlcakKiFDBacnORzzWv1yTE.roa (hash: agYbT4sj3xKKoiRvTRiMrXGnEy5N2ggal8elxJ61JUw=)
                          2: HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa (hash: E94twRw9JlGZMbmmCttmzyXZguvpf/OPgy8FVeGF2rg=)
                          3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: Sli2EG0wqTsYM8fezx8V8KU5bE24jbeEAc0TIbBMrr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:ec:c5:d0:8b:60:24:02:8d:5e:23:1a:c2:d3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
        Validity
            Not Before: Nov  4 22:00:40 2025 GMT
            Not After : Nov  5 22:00:40 2025 GMT
        Subject: CN=333861e40c664280cf30407fff88194e4a8e75d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b4:2d:f0:63:48:56:87:e5:1f:c5:6b:48:ae:
                    9d:e7:63:f4:44:2c:fd:6c:f4:65:28:f6:6b:3b:50:
                    35:95:45:cd:80:18:6b:76:1e:c9:65:bd:68:f4:5c:
                    8b:27:86:1f:0d:65:d7:2e:1e:14:38:b4:34:65:21:
                    1f:72:ca:e1:d0:d4:7d:87:77:87:60:c4:07:29:ec:
                    f2:e9:32:b7:8c:7d:4c:50:6f:c2:e1:a0:1c:0b:4a:
                    cd:34:f1:d7:f9:d1:71:53:1a:51:9c:6e:96:24:a8:
                    eb:d5:ab:da:6f:e6:f5:54:2c:96:ab:ce:7d:e9:ca:
                    4e:95:8a:bf:7f:f0:c3:5b:c2:2b:6a:39:68:0b:ff:
                    86:92:c0:97:74:b0:95:ae:83:7a:50:f8:6a:7f:53:
                    38:e3:9a:21:a4:20:57:e4:67:b7:7e:07:43:19:96:
                    3b:e8:94:c0:26:4f:c1:dc:a5:99:2e:bd:ee:44:8f:
                    80:fd:96:67:a2:d2:98:9d:f1:8f:15:37:8e:cb:92:
                    06:88:a2:34:83:2b:0c:82:d3:ee:34:ba:98:f3:57:
                    8b:fa:37:f4:15:ed:b1:88:22:1a:a7:4e:fc:92:20:
                    04:48:22:3f:58:04:5b:9c:3a:3c:47:ef:f4:f8:33:
                    12:75:12:7e:27:2b:83:92:30:da:58:67:10:ab:34:
                    18:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:38:61:E4:0C:66:42:80:CF:30:40:7F:FF:88:19:4E:4A:8E:75:D6
            X509v3 Authority Key Identifier:
                keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8a:2b:ec:e7:34:24:e4:a9:8b:90:fb:88:bc:0b:2f:08:0e:
         18:93:55:bc:fb:dc:71:43:aa:57:9e:de:88:9b:a7:9d:12:70:
         8e:68:de:73:9f:1e:11:b1:30:7e:32:0e:e9:22:60:f0:cc:fe:
         f6:4d:e4:de:b5:0e:1c:06:47:ad:ea:bf:6b:2b:af:ea:9d:14:
         f6:4f:db:c7:32:f8:03:c0:78:18:9b:34:2f:ec:08:a6:b9:7d:
         7e:d2:a5:40:a2:af:19:f2:b8:b3:2f:fc:98:2e:b7:6e:7e:07:
         5a:ac:9f:6c:fd:93:6b:e4:09:23:2e:5d:b9:49:da:e3:d5:8c:
         59:c2:2d:47:31:51:b6:cc:90:e8:f6:d7:5d:44:f6:09:5d:6b:
         f4:a9:9c:70:c0:b4:e2:72:07:a1:d0:df:d5:66:16:7d:2d:04:
         f4:48:d6:f9:91:55:fc:77:03:1d:bb:40:74:99:cd:6f:ec:a4:
         ec:1c:2a:08:c8:0c:0c:e4:f4:1e:0c:7d:3b:2c:b4:c9:e7:e1:
         5b:55:c6:bf:3e:bd:65:d0:bf:84:d9:11:51:82:a4:7a:42:d8:
         c1:3c:81:4e:48:c0:1e:bf:67:b5:e2:e6:10:f8:df:ea:62:c9:
         19:da:64:99:b5:ec:c4:d9:1a:d7:54:6c:70:df:54:16:91:2f:
         1f:af:06:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4uzF0ItgJAKNXiMawtMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMDg0MDgwNGM2NjgwYzQxZjIxZTg3MjZmMzgwYjk1ZTY5
ZTk0NDcwHhcNMjUxMTA0MjIwMDQwWhcNMjUxMTA1MjIwMDQwWjAzMTEwLwYDVQQD
EygzMzM4NjFlNDBjNjY0MjgwY2YzMDQwN2ZmZjg4MTk0ZTRhOGU3NWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLQt8GNIVoflH8VrSK6d52P0RCz9
bPRlKPZrO1A1lUXNgBhrdh7JZb1o9FyLJ4YfDWXXLh4UOLQ0ZSEfcsrh0NR9h3eH
YMQHKezy6TK3jH1MUG/C4aAcC0rNNPHX+dFxUxpRnG6WJKjr1avab+b1VCyWq859
6cpOlYq/f/DDW8IrajloC/+GksCXdLCVroN6UPhqf1M445ohpCBX5Ge3fgdDGZY7
6JTAJk/B3KWZLr3uRI+A/ZZnotKYnfGPFTeOy5IGiKI0gysMgtPuNLqY81eL+jf0
Fe2xiCIap078kiAESCI/WARbnDo8R+/0+DMSdRJ+JyuDkjDaWGcQqzQYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM4YeQMZkKAzzBAf/+IGU5KjnXWMB8GA1UdIwQY
MBaAFI4IQIBMZoDEHyHocm84C5XmnpRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYt
YzI3OTk3NTNjODUzLzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYtYzI3OTk3NTNjODUz
LzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYor7Oc0
JOSpi5D7iLwLLwgOGJNVvPvccUOqV57eiJunnRJwjmjec58eEbEwfjIO6SJg8Mz+
9k3k3rUOHAZHreq/ayuv6p0U9k/bxzL4A8B4GJs0L+wIprl9ftKlQKKvGfK4sy/8
mC63bn4HWqyfbP2Ta+QJIy5duUna49WMWcItRzFRtsyQ6PbXXUT2CV1r9KmccMC0
4nIHodDf1WYWfS0E9EjW+ZFV/HcDHbtAdJnNb+yk7BwqCMgMDOT0Hgx9Oyy0yefh
W1XGvz69ZdC/hNkRUYKkekLYwTyBTkjAHr9nteLmEPjf6mLJGdpkmbXsxNka11Rs
cN9UFpEvH68GDQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:21 2025 by rpki-client